Publish Advisories

GHSA-8ppr-www8-hfjx
GHSA-mmh6-5cpf-2c72
GHSA-wq88-fq4x-h2pm
GHSA-8ppr-www8-hfjx

advisories/github-reviewed/2024/03/GHSA-8ppr-www8-hfjx/GHSA-8ppr-www8-hfjx.json

@@ -0,0 +1,70 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8ppr-www8-hfjx",
+  "modified": "2024-03-25T19:34:46Z",
+  "published": "2024-03-25T15:30:41Z",
+  "aliases": [
+    "CVE-2024-29650"
+  ],
+  "summary": "@thi.ng/paths Prototype Pollution vulnerability",
+  "details": "An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the `mutIn` and `mutInManyUnsafe` components.",
+  "severity": [
+
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "@thi.ng/paths"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "5.1.63"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29650"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/thi-ng/umbrella/issues/445"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/thi-ng/umbrella/commit/c78b484882ad5214a46ef83ddb8020571c171353"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gist.github.com/tariqhawis/1bc340ca5ea6ae115c9ab9665cfd5921"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/thi-ng/umbrella"
+    },
+    {
+      "type": "WEB",
+      "url": "https://learn.snyk.io/lesson/prototype-pollution/#a0a863a5-fd3a-539f-e1ed-a0769f6c6e3b"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1321"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-03-25T19:34:46Z",
+    "nvd_published_at": "2024-03-25T15:15:52Z"
+  }
+}

advisories/github-reviewed/2024/03/GHSA-mmh6-5cpf-2c72/GHSA-mmh6-5cpf-2c72.json

@@ -0,0 +1,60 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mmh6-5cpf-2c72",
+  "modified": "2024-03-25T19:35:09Z",
+  "published": "2024-03-25T19:35:09Z",
+  "aliases": [
+    "CVE-2024-29196"
+  ],
+  "summary": "phpMyFAQ Path Traversal in Attachments",
+  "details": "### Summary\nThere is a Path Traversal vulnerability in Attachments that allows attackers with admin rights to upload malicious files to other locations of the web root.\n\n### PoC\n1. In settings, the attachment location is vulnerable to path traversal and can be set to e.g ..\\hacked\n![image](https://github.com/thorsten/phpMyFAQ/assets/63487456/6167ba74-254c-4aed-9c16-759e5ceafd81)\n\n2. When the above is set, attachments files are now uploaded to e.g C:\\Apps\\XAMPP\\htdocs\\hacked instead of C:\\Apps\\XAMPP\\htdocs\\phpmyfaq\\attachments\n\n3. Verify this by uploading an attachment and see that the \"hacked\" directory is now created in the web root folder with the attachment file inside.\n![image](https://github.com/thorsten/phpMyFAQ/assets/63487456/325df0cc-e9ee-48bd-a7bb-1295199b4d9e)\n![image](https://github.com/thorsten/phpMyFAQ/assets/63487456/beb10a6a-9d56-4607-8da6-49581991b1fe)\n\n### Impact\nAttackers can potentially upload malicious files outside the specified directory.\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "phpmyfaq/phpmyfaq"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "3.2.5"
+            },
+            {
+              "fixed": "3.2.6"
+            }
+          ]
+        }
+      ],
+      "versions": [
+        "3.2.5"
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-mmh6-5cpf-2c72"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/thorsten/phpMyFAQ"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2024-03-25T19:35:09Z",
+    "nvd_published_at": null
+  }
+}

advisories/unreviewed/2024/03/GHSA-8ppr-www8-hfjx/GHSA-8ppr-www8-hfjx.json

@@ -1,39 +0,0 @@
-{
-  "schema_version": "1.4.0",
-  "id": "GHSA-8ppr-www8-hfjx",
-  "modified": "2024-03-25T15:30:41Z",
-  "published": "2024-03-25T15:30:41Z",
-  "aliases": [
-    "CVE-2024-29650"
-  ],
-  "details": "An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components.",
-  "severity": [
-
-  ],
-  "affected": [
-
-  ],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29650"
-    },
-    {
-      "type": "WEB",
-      "url": "https://gist.github.com/tariqhawis/1bc340ca5ea6ae115c9ab9665cfd5921"
-    },
-    {
-      "type": "WEB",
-      "url": "https://learn.snyk.io/lesson/prototype-pollution/#a0a863a5-fd3a-539f-e1ed-a0769f6c6e3b"
-    }
-  ],
-  "database_specific": {
-    "cwe_ids": [
-
-    ],
-    "severity": null,
-    "github_reviewed": false,
-    "github_reviewed_at": null,
-    "nvd_published_at": "2024-03-25T15:15:52Z"
-  }
-}